Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-10966

Опубликовано: 07 нояб. 2025
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS3: 4.3

Описание

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

РелизСтатусПримечание
devel

not-affected

code not compiled
esm-infra-legacy/trusty

not-affected

code not compiled
esm-infra-legacy/xenial

not-affected

code not compiled
esm-infra/bionic

not-affected

code not compiled
esm-infra/focal

not-affected

code not compiled
esm-infra/xenial

not-affected

code not compiled
jammy

not-affected

code not compiled
noble

not-affected

code not compiled
plucky

not-affected

code not compiled
questing

not-affected

code not compiled

Показывать по

EPSS

Процентиль: 31%
0.00399
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
redhat
11 месяцев назад

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

CVSS3: 4.3
nvd
11 месяцев назад

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

CVSS3: 6.8
msrc
10 месяцев назад

missing SFTP host verification with wolfSSH

CVSS3: 4.3
debian
11 месяцев назад

curl's code for managing SSH connections when SFTP was done using the ...

CVSS3: 4.3
github
11 месяцев назад

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

EPSS

Процентиль: 31%
0.00399
Низкий

4.3 Medium

CVSS3